This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36322e302f32342d3234203d3e203435333132.roa
File:                     3230322e38312e36322e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          BWhkZ7HCs07UsqJhizHthW3ZCLBqoQBZZvRMQ1vSV+E=
Subject key identifier:   A9:72:CD:F7:C9:AD:92:87:0F:41:05:43:64:8D:99:B3:E1:31:46:F5
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       4F15055230B8DA02478200563F21AE7F96742328
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36322e302f32342d3234203d3e203435333132.roa
Signing time:             Tue 18 Nov 2025 06:00:01 +0000
ROA not before:           Tue 18 Nov 2025 05:55:01 +0000
ROA not after:            Tue 17 Nov 2026 06:00:01 +0000
asID:                     45312
IP address blocks:        202.81.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:15:05:52:30:b8:da:02:47:82:00:56:3f:21:ae:7f:96:74:23:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Nov 18 05:55:01 2025 GMT
            Not After : Nov 17 06:00:01 2026 GMT
        Subject: CN=A972CDF7C9AD92870F410543648D99B3E13146F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:08:07:c9:21:70:6f:24:c8:fc:cb:1c:ba:84:
                    6d:58:11:0e:d0:dd:51:42:c4:8e:1e:f8:aa:c3:13:
                    ce:47:e0:b7:27:da:b9:f8:06:69:e4:15:4f:79:ac:
                    98:03:4f:5f:86:61:18:db:14:43:dd:f4:0b:31:64:
                    9d:43:cd:a0:1d:15:53:c7:f9:72:df:17:d5:36:35:
                    a3:50:6b:96:92:02:3e:5b:74:c1:d9:80:de:ae:09:
                    26:d1:88:ab:d4:ee:bb:ad:f1:1f:f1:b0:c5:bf:38:
                    ab:a4:62:61:3d:78:1c:b6:b4:e5:8d:9a:22:09:1e:
                    92:92:09:2d:f1:01:f4:73:d3:a9:99:c2:1c:e3:ae:
                    1e:67:09:04:f2:e7:5f:7a:90:27:26:36:8e:e4:8d:
                    7a:ee:d9:f4:38:1b:33:64:44:4c:b6:4c:a7:21:86:
                    b3:b2:03:19:5a:aa:56:d2:89:4c:1b:0b:bb:98:4c:
                    02:66:e2:68:14:1a:c9:c1:9a:57:08:f2:14:3e:57:
                    16:8d:26:9b:bd:a1:27:87:53:df:d3:bd:48:f4:cb:
                    c5:f8:6c:94:78:99:ae:d2:6a:2e:71:3b:bf:7b:13:
                    36:09:a5:f3:8b:05:7b:b2:27:6b:59:41:36:15:b1:
                    b6:bd:21:65:d1:65:e5:7a:e1:ad:52:f9:de:4d:41:
                    c9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:72:CD:F7:C9:AD:92:87:0F:41:05:43:64:8D:99:B3:E1:31:46:F5
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36322e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:ee:a4:df:93:01:de:69:4a:cf:36:00:b5:8e:18:8e:b6:99:
         90:b7:0b:bc:66:7a:e7:75:ad:cb:36:0b:3a:d0:e2:57:6a:40:
         2d:4e:47:77:1c:5e:0b:22:b1:0e:e2:4f:74:91:1d:e3:c4:36:
         f1:71:73:aa:ac:c9:e4:54:6e:30:46:30:f6:8e:fb:7f:94:8a:
         89:0d:dc:8f:e4:83:33:14:aa:25:b1:97:2c:f7:fa:91:66:a2:
         7d:95:17:1e:20:fd:3a:ab:a5:75:a4:eb:44:28:24:c9:4c:28:
         73:ae:c3:ed:f8:0a:b5:0e:d2:1b:d6:fe:6e:76:ee:48:27:0a:
         a6:e8:99:9e:fd:a8:77:39:76:a1:b3:7a:be:3a:77:89:70:de:
         53:a3:77:7b:5f:c4:8f:be:fc:2a:87:af:18:5b:a8:5d:68:bd:
         c9:8d:0d:c5:ed:50:2b:28:1f:2c:80:17:fd:5f:d4:d5:07:6d:
         77:0a:0f:ea:f1:fe:39:e4:ba:18:f3:90:14:a7:9b:50:d9:19:
         c3:bc:09:80:c8:77:7f:18:7f:1e:73:05:c6:a4:c5:07:78:e0:
         5a:3c:5c:3a:d2:92:cb:34:7a:59:d8:f8:26:1e:3c:a9:09:3a:
         ee:c0:00:34:27:8e:e6:3f:21:d7:71:7a:61:68:ba:e5:b2:f3:
         a5:39:b2:c1
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUTxUFUjC42gJHggBWPyGuf5Z0IygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NB
MEJGQzQ0MTAeFw0yNTExMTgwNTU1MDFaFw0yNjExMTcwNjAwMDFaMDMxMTAvBgNV
BAMTKEE5NzJDREY3QzlBRDkyODcwRjQxMDU0MzY0OEQ5OUIzRTEzMTQ2RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3CAfJIXBvJMj8yxy6hG1YEQ7Q
3VFCxI4e+KrDE85H4Lcn2rn4BmnkFU95rJgDT1+GYRjbFEPd9AsxZJ1DzaAdFVPH
+XLfF9U2NaNQa5aSAj5bdMHZgN6uCSbRiKvU7rut8R/xsMW/OKukYmE9eBy2tOWN
miIJHpKSCS3xAfRz06mZwhzjrh5nCQTy5196kCcmNo7kjXru2fQ4GzNkREy2TKch
hrOyAxlaqlbSiUwbC7uYTAJm4mgUGsnBmlcI8hQ+VxaNJpu9oSeHU9/TvUj0y8X4
bJR4ma7Sai5xO797EzYJpfOLBXuyJ2tZQTYVsba9IWXRZeV64a1S+d5NQcm/AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUqXLN98mtkocPQQVDZI2Zs+ExRvUwHwYDVR0j
BBgwFoAUFU7gMZhGe5YxX9tSf7O7zKC/xEEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NjIxZjc1My1hODhlLTRlZGYtYTMwNi1iZDkzZDVhMzhmZWEvMC8xNTRFRTAzMTk4
NDY3Qjk2MzE1RkRCNTI3RkIzQkJDQ0EwQkZDNDQxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NBMEJG
QzQ0MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h
MzA2LWJkOTNkNWEzOGZlYS8wLzMyMzAzMjJlMzgzMTJlMzYzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzUzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKUT4wDQYJKoZIhvcN
AQELBQADggEBAIDupN+TAd5pSs82ALWOGI62mZC3C7xmeud1rcs2CzrQ4ldqQC1O
R3ccXgsisQ7iT3SRHePENvFxc6qsyeRUbjBGMPaO+3+UiokN3I/kgzMUqiWxlyz3
+pFmon2VFx4g/TqrpXWk60QoJMlMKHOuw+34CrUO0hvW/m527kgnCqbomZ79qHc5
dqGzer46d4lw3lOjd3tfxI++/CqHrxhbqF1ovcmNDcXtUCsoHyyAF/1f1NUHbXcK
D+rx/jnkuhjzkBSnm1DZGcO8CYDId38Yfx5zBcakxQd44Fo8XDrSkss0elnY+CYe
PKkJOu7AADQnjuY/IddxemFouuWy86U5ssE=
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:32:02 2025 by rpki-client